Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/df64e67f-d3d6-364f-a088-ad6e4759cafb.roa
File: df64e67f-d3d6-364f-a088-ad6e4759cafb.roa (raw, json)
Hash identifier: GI11tlSE4vcyt+oSwrGpz0nysLVA4JtNlDgLJSv7dw8=
Subject key identifier: B6:F0:29:DC:92:60:84:45:A3:28:7E:7F:6D:81:D1:19:B5:7D:02:63
Certificate issuer: /CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
Certificate serial: 010D0C9F432858491AA6B0D8984B6A57C79ED248
Authority key identifier: 60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/df64e67f-d3d6-364f-a088-ad6e4759cafb.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 53454
IP address blocks: 104.225.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:b0:d8:98:4b:6a:57:c7:9e:d2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=bde22dce-84de-4c0f-95fa-b22be2a38a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:55:a5:58:d2:62:d2:a5:71:80:21:65:a3:
31:87:f1:53:b5:7a:34:97:69:3c:01:9f:8f:a0:4d:
bb:3b:1c:44:55:4d:bd:43:b0:38:50:c4:45:e4:41:
80:da:57:72:5c:e9:80:dc:25:68:74:04:7b:6c:ac:
2e:55:53:d2:f4:33:a0:f6:22:34:15:8a:f5:a3:27:
99:d0:b2:db:70:87:3a:66:14:c5:7b:4c:e8:07:00:
d6:a1:0d:62:ec:03:d9:aa:82:c1:2e:29:68:33:8e:
3e:3b:bb:37:f3:da:cb:3e:67:ef:f6:31:a0:f3:b0:
12:c5:65:c4:c7:5a:fb:9f:37:1e:61:cd:46:ef:52:
32:92:ac:97:9b:a7:78:5d:9a:c0:67:61:7a:27:8f:
0b:1c:56:24:38:3b:49:fc:24:8e:a1:43:8f:34:44:
d0:94:67:8c:8e:76:7b:df:57:c5:6b:38:4d:4c:8a:
85:ec:9a:22:0b:bf:6a:bb:f9:72:8a:ab:c0:17:d6:
3f:b2:8f:aa:a8:f3:9e:7e:a5:42:82:6f:66:74:93:
59:f3:2b:4a:56:da:ae:3a:f3:6a:9f:d9:ca:28:7e:
64:0f:b6:bb:41:1f:31:58:58:b9:e7:b1:b6:58:ad:
fd:2c:dd:bd:ae:ac:f4:60:92:1c:c6:f2:c2:ab:d8:
b8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F0:29:DC:92:60:84:45:A3:28:7E:7F:6D:81:D1:19:B5:7D:02:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/df64e67f-d3d6-364f-a088-ad6e4759cafb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl
X509v3 Authority Key Identifier:
keyid:60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
sbgp-ipAddrBlock: critical
IPv4:
104.225.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:b8:fd:37:77:06:03:17:a2:f6:94:c3:1e:8f:3a:32:d9:e8:
0b:1a:51:b9:85:8b:fe:af:73:8d:38:b7:12:34:87:5f:ae:18:
9e:21:7d:e7:1f:ae:61:09:ff:51:7b:de:c8:74:39:86:46:73:
31:12:c7:83:d0:bf:b0:5f:65:ea:a8:82:25:76:d3:89:1d:14:
fd:c9:1d:e6:75:73:4a:5d:a4:cc:9c:0d:5f:3e:e3:27:ce:cf:
3a:3c:3a:ba:07:55:ae:e0:ee:79:b7:28:c4:58:8e:60:af:3e:
1f:69:c1:b2:ee:e2:64:16:a0:7c:a1:26:92:fc:f2:b0:83:a6:
a3:49:9f:af:a0:3c:8a:a3:81:bc:64:72:c7:a2:e1:ee:0f:38:
3c:f1:07:3b:62:6b:ba:6a:25:7e:39:3c:61:44:ad:81:9f:53:
94:18:11:66:d0:a1:01:ab:a4:32:2f:83:8b:ea:0b:5a:ad:76:
07:63:15:91:84:80:18:ff:82:31:fa:a4:2b:95:70:3c:41:32:
64:d6:e2:07:ce:63:d9:e9:07:50:3b:6b:fb:ed:dd:42:e6:36:
87:56:48:99:da:60:b9:92:15:b2:0f:dd:a9:59:0a:70:35:48:
cf:62:f2:12:82:7e:aa:d4:41:96:b1:dd:a8:c4:46:02:75:6c:
33:30:f5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:37:00 2025 by rpki-client